University of Limerick
Cremer_2024_Bridging.pdf (3.53 MB)

Bridging the cyber protection gap: An investigation into the efficacy of the German cyber insurance market

Download (3.53 MB)
journal contribution
posted on 2024-05-30, 13:57 authored by Frank CremerFrank Cremer, Barry SheehanBarry Sheehan, Michael Fortmann, Martin MullinsMartin Mullins, Finbarr MurphyFinbarr Murphy, Stefan Materne

Cybersecurity requires an effective risk transfer regime and a well‐functioning insurance market to improve stakeholder resilience. However, rapid cyber threat adaptation, limited data availability, and inadequate risk understanding pose significant challenges for the insurance industry and its customers. This research uses a mixed methods approach to analyze the inclusions, exclusions, and suitability of current cyber policies in the German cyber insurance market. The study analyzes 41 cyber insurance policies, representing about 80% of the German cyber insurance market. This examination is supported by semistructured interviews with 23 cyber insurance experts. The authors find that there are no standardized cyber policy wordings, and insurers use different terms and definitions in their insurance policies. Specifically, the results show a significant lack of clarity around coverages and exclusions. This research contributes to the cybersecurity risk management community and will enable businesses, insurance companies, and policymakers to better understand, measure, and manage cyber risk.



Risk Management and Insurance Review, 2024, 27 (1), pp. 57–87


Wiley and Sons Ltd

Sustainable development goals

  • (9) Industry, Innovation and Infrastructure

Department or School

  • Accounting & Finance

Usage metrics

    University of Limerick


    Ref. manager